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(54) Network-device control system and apparatus 



(57) In a network-device control system for control- 
ling a network device such as a router, which Is located 
between a communication terminal employed by a user 
and a server with which the terminal communicates, at 
a priority that has been set in advance for the user or for 
an application, an event notification device detects that 
a user has logged in to the communication terminal or 
that the user has launched a predetermined application 



from the communication terminal and reports the user 
identifier or the application identifier to a network-device 
controller. The latter acquires user priority or application 
priority on the basis of the reported identifier and, in 
accordance with the priority, controls tfie router on the 
comnuinication path between the communication termi- 
nal and the server. 
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Description 

BACKGROUND OF THE INVENTION 

[0001] This invention relates to a system and appa- 
ratus for controlling network devices. More particularly, 
the invention relates to a network-device control system 
and apparatus for performing control of priority, band- 
width, discard rate and delay in relation the devices that 
construct a network. 

[0002] The following functions and features (1) to 
(3) are currently sought as network requirements: 

(1) Quality assurance 

[0003] Unification of continuous traffic, such as tel- 
ephone traffic that is sensitive to delay, and basic busi- 
ness traffic with an IP (Internet Protocol) network of 
superior cost performance is sought However, the 
basic nature of an IP network is best-effort transport of 
IP packets. In such a best-effort transport environment, 
an effort is made only to transport anriving packets to 
the next stage without distinguishing among users or 
among applications. Packets that cannot be transported 
(i.e.. packets for which buffer overflow has occurred) are 
discarded as is. Accordingly, in order for a best-effort IP 
network to accommodate delay-sensitive traffic, it is 
required that control of traffic priority and assurance of 
bandwidth based upon the user or application is irrtro- 
duced In an IP network. 

(2) Minimum nxxiification of existing network devices 

[0004] Replacing terminal devices and network 
devices (routers, switches, etc.) and installing new soft- 
ware in these devices in order to assure bandwidth and 
control priority on a network raises the cost of introduc- 
tion and. hence, is a hindrance to such introduction. 
Minimizing the modification of existing devices is 
required in order to solve this problem. 

(3) Quality and priority control capable of dealing with 
dynamic modification of terminal devices and network 
devices 

[0005] Among all devices that construct a network, 
it will suffice to apply quality and priority control solely to 
end-to-end devices on the communication path. This 
communication path is decided In accordance with a 
predetermined routing protocol based upon the destina- 
tion address with which communication is performed 
and the terminal address of the accessing party. How- 
ever, the destination address and terminal address 
change constantly depending upon the location of the 
user and the application utilized. A dynamic quality and 
priority control method that can deal with such change 
is sought. 

[0006] The following two methods have been con- 



templated lor the purpose of performing quality assur- 
ance control such as control for assurance of bandwidth 
or control of priority. 

[0007] The first method involves statically configur- 

5 ing network devices for the purpose of qualrty-assur- 
ance control. Specifically, control of communication 
quality with respect to terminal-to-terminal communica- 
tion is performed by configuring the network devices 
before hand so that predetermined bandwidth assur- 

10 ance and priority control is attained. This is the most 
widely utilized approach at present. In order to configure 
for bandwidth assurance and priority control (i.e.. in 
order to establish control of quality), there are two meth- 
ods, namely (a) a method referred to as limited corrfigu- 

15 ration method which includes predicting communication 
that will occur and configuring network devices on this 
communication path for control of quality in limited fash- 
ion, and (b) a method which includes configuring all 
configurable network devices for control of quality com- 

20 prehensively without particularly specifying a path. 
[0008] The second method uses an RSVP 
(Resource Reservation Protocol) for which control of 
quality can be configured dynamically. RSVP is a con- 
trol protocol for reserving resources in the IP layer. 

25 According to RSVP, control messages are exchanged 
between routers that support RSVP and the sender and 
receiver. The RSVP works to reserve transmission 
paths and memory resources within an apparatus so 
that an application can be executed. Rg. 20 is a dia- 

30 gram useful in describing RSVP. A sender 1 sends a 
receiver 2 a path message that desaibes the traffic 
characteristics of the information (content) to be trans- 
mitted. The path message is distributed to the receiver 
2 by being transferred along a path (routers 3, 4) set up 

35 by a predetermined routing protocol. The receiver 2 
refers to the content described in the path message and 
sends a reserve message, which describes the 
resources requiring reservation, back to the sender 1 . If 
reservation requests from a plurality of receivers are 

40 merged and acceptance of a requested bandwidth res- 
ervation is possible in a router along the path, band- 
width is secured in accordance with the content of the 
reservation request and a reserve message is trans- 
ferred to a router upstream and to the sender 1. If 

45 acceptance of a requested bandwidth reservation is 
impossible, however, the reserve message is discarded 
and an error message is transmitted to the receiver 1 . 
[0009] The second method based upon RSVP 
described above makes it possible to control quality 

50 dynamically when the user so desires. 

[0010] However, the first and second methods set 
forth above do not always satisfy the above-mentioned 
requirements (1), (2) and (3). 

[0011] If communication different from that pre- 
55 dieted in advance takes place, as when a user makes 
access from a terminal different from that configured 
beforehand or when a network device is added on 
anew, the limited configuration technique according to 
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the first method is such that static quality-control set- 
tings will not exist for such communication. This means 
that the required control of quality cannot be performed. 
In other words, with the limited configuration method, 
changes in conditions cannot be dealt with and, as a 
result, control of quality cannot be realized. 
[001 2] With the other technique available in accord- 
ance with the first method, namely the technique 
through which all configurable network devices are con- 
figured for quality control, the user can make access 
from any terminal whatsoever because all of the termi- 
nals will have been configured. However, since settings 
that support all communication patterns are required for 
all network devices, the storage area necessary in a 
network device for the purpose of storing these settings 
is enormous. (The size of the storage area is propor- 
tional to the square of the number of terminals ) Since a 
network device possesses only a limited storage area, 
such comprehensive configuring of network devices is 
difficult. The result is that network communication 
assumed beforehand undergoes limited configuration. 
[001 3] With the second method, it is assumed that 
both sending and receive terminals involved in commu- 
nication and all network devices (routers) on the path 
along which this communication takes place support 
RSVR Consequently, if a network device that does not 
support RSVP exists in the network, this device canriot 
undergo any control of quality. If congestion occurs in 
regard to this network device, even a packet in commu- 
nication requiring control of quality will be discarded or 
delayed. The end result is that communication quality 
cannot be controlled. In order to avoid this problem, 
components which support RSVP are required for all 
network devices and it is necessary to increase the stor- 
age area and processing capability of each network 
device. 

SUMMARY OF THE INVENTION 

[0014] Accordingly, an object of the present inven- 
tion is to arrange it so that priority control and quality 
control (control of bandwidth, discard rate and delay) 
can be carried out even if there is a change in a terminal 
employed by a user or a change in network configura- 
tion due to the addKion of a network device. 
[0015] Another object of the present invention is to 
arrange it so that priority control and quality control can 
be performed, without dependence upon a specific pro- 
tocol such as RSVP. even if there is a change in a termi- 
nal employed by a user or a change in network 
configuration due to the addition of a network device. 
[001 6] Another object of the present invention is to 
arrange it so that communication can be performed 
between a terminal employed by a user and a server, 
which is the destination of communication, at a priority 
or quality set for the user in advance. 
[001 71 A further object of the present invention is to 
arrange it so that communication can be performed 



between a user terminal that has launched an applica- 
tion and a server, which is the destination of communi- 
cation, at a priority or quality set for the application in 
advance. 

5 

(a) First network-device control system of the present 
invention 

[0018] A first network-device control system 

10 according to the present invention includes (1) an event 
notification device for detecting that a user has logged in 
to a communication terminal or that a user has 
launched a predetermined application from a communi- 
cation terminal, ard giving notification of an identifier of 

15 the user and of the fact that an event has occurred, and 
(2) a network-device controller for performing priority 
control of a network device based upon information of 
which notification has been given by the event notifica- 
tion device. The network-device corrtroller acquires the 

20 priority of the user indicated t>y the user identifier of 
which notification has been given by the event notifica- 
tion device, obtains a network device on a communica- 
tion path between the communication terminal 
employed by the user and a server which is the desttna- 

25 tion of communication, generates information neces- 
sary to perform priority control in accordance with user 
priority, and sets this priority control information in each 
network device (routers, etc.) on the communication 
path. 

30 [0019] In the first network-device control system 
described above, the event notification device includes 
(1) an event detector for detecting that a user has 
logged in to a communication terminal or that a user has 
launched an application from a communication termi- 

35 nal. and (2) an event notifier for notifying the network- 
device controller at least of the fact that the event 
occurred and of the user identifier. Further, the network- 
device controller includes (1) an event receiver for 
receiving notification from the event notifier, (2) a priority 

40 acquisition unit for acquiring the priority of a user irxli- 
cated by a received user identifier. (3) a device selector 
for selecting a network device which is subjected to pri- 
ority control based upon the priority of the user, (4) a 
device-specific information acquisition unit for acquiring 

45 state of configuration of the network device and a 
method of configuring the device, (5) a configuration 
information generator for generating priority-control 
configuration information for performing priority control 
of each network device based upon the acquired 

so device-specific information and user priority, and (6) a 
configuration information transmitter for transmitting the 
priority-control configuration information, which has 
t>een generated by the configuration information gener- 
ator, to the selected network device to thereby set tiie 

55 information in this network device. 

[0020] In accordance with the first aspect of the 
invention, a network device is obtained on a communi- 
cation path connecting a communication terminal 
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employed by a user and a server that is the destination 
of communication, and priority control is performed 
upon setting priority information, which conforms to the 
priority of the user, in this device. As a result, control of 
priority can be performed dynamically, without using a 
specific protocol such as RSVP. even if there is a 
change in a terminal used by a user or a change in net- 
work configuration, such as a change due to the addi- 
tion of a network device. Further, in accordance with the 
first aspect of the invention, communication between a 
terminal employed by a user and a server that is the 
destination of communication can be performed at a pri- 
ority set for the user in advance. As a result, by setting a 
priority that takes the section/department to which an 
employee belongs and organization into account in an 
enterprise network, it is possible to perform communi- 
cation based upon priority control commensurate with 
the set priority. 

[0021] Further, according to the first aspect of the 
invention, there is provided a database unit for storing, 
in association with a user identifier, user information that 
includes the address of the server that is the destination 
of communication and the user priority. The event notifi- 
cation device acquires user priority and the server 
address from the database unit and reports these to the 
network-device controller. If this arrangement is 
adopted, the user, merely by entering the user identifier 
from a communication terminal and logging in. estab- 
lishes a communication path between this communica- 
tion terminal and the server with which the user wishes 
to communicate. Communication between the terminal 
employed by the user and the server can be performed 
at the priority set for the user beforehand. 
[0022] Further, when an application is launched 
after user log -In, the priority control mentioned above 
can be carried out. If this arrangement is adopted, the 
configuring of priority control necessary for the user in a 
network is performed more accurately by taking launch- 
ing of an application by the user as an event. When pri- 
ority control is necessary, such control can be 
configured solely for the necessary network device. 

(b) Second network-device control system of the 
present invention 

[0023] A second network-device control system 
according to the present invention includes (1) an event 
notification device for detecting that a user has 
launched a predetermined application from a communi- 
cation terminal, and giving notification of an identifier of 
this application and of the fact that application^launch 
event has occurred, and (2) a network-device controller 
for performing priority control of a network device based 
upon information of which notification has been given. 
The network-device controller acquires the priority of 
the application indicated by the application identifier of 
which notification has been given by the event notifica- 
tion device, obtains a network device on a communica- 



tion path between the communication terminal and a 
server with which the communication terminal commu- 
nicates, generates information necessary to perform 
priority control in accordance with this priority, and con- 
5 figures each network device with this priority control 
information. 

[0024] In the second network-device control system 
described above, the event notification device includes 
(1) an event detector for detecting that a communication 

10 terminal has given rise to an application-launch event, 
and (2) an event notif ier for notifying the network-device 
controller at least of the fact that the event occurred and 
of the application identifier. Further, the network-device 
controller Includes (1) an event receiver for receiving 

15 notification from the event notif ier, (2) a priority acquisi- 
tion unit for acquiring the priority of an application irxii- 
cated by a received application identifier, (3) a device 
selector for selecting a network device which is sub- 
jected to priority control based upon the priority of the 

20 application, (4) a device*specif ic information acquisition 
unit for acquiring state of configuration of the selected 
network device and a method of configuring the device, 
(5) a configuration information generator for generating 
priority-control configuration information for performing 

25 priority control of each network device based upon the 
acquired device-specific information and application pri- 
ority, and (6) a configuration information transmitter for 
transmitting the priority-control configuration informa- 
tion, which has been generated by the configuration 

30 information generator, to the selected network device to 
thereby set this information in this network device. 
[0025] In accordance with the second aspect of the 
invention, a network device is obtained on a communi- 
cation path connecting a communication terminal 

35 employed by a user and a server that is the destination 
of communication, and priority control is performed 
upon setting priority information, which conforms to the 
priority of the launched application, in this device. As a 
result, control of priority can be performed dynamically. 

40 Without using a specific protocol such as RSVP, even 
there is a change in a terminal used by a user or a 
change in network configuration, such as a change due 
to the addition of a network device. As a result, by con- 
figuring priorities for various applications in an enter- 

45 prise network upon taking into account the urgency and 
importance of these applications, it is possible to per- 
form communication based upon priority control com- 
mensurate with the set priority. 

[0026] Further, according to the second aspect of 
50 the invention, the event notification device acquires the 
priority of the application, the address of the server that 
is the destination of communication and the address of 
the communicating terminal from a database unit based 
upon the application identifier and reports these to the 
55 network-device controller. If this arrangement is 
adopted, the user, merely by entering the user identifier 
from a prescribed communication terminal, logging in 
and launching the prescribed application, can set up a 
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communication path between this communication termi- 
nal and the server that conforms to the application. And 
communication between the terminal employed by the 
user and the server can be performed at the priority set 
for the application beforehand. s 

(c) Third network<Jevice control system of the present 
invention 

[0027] In the first and second network-device con- 
trol systems according to the present invention, priority 
is set in advance in conformity with the user or applica- 
tion and priority control is performed in accordance with 
the priority of the user or the priority of the application. 
[0028] In the third network-dwice control system 
according to the present invention, a value of band- 
wkJth, cfiscard rate or delay time instead of priority is 
configured for a user or application and bandwidth con- 
trol, discard-rate control or delay control is carried out in 
accordance with the configured value on a communica- 
tion path between the terminal employed by the user 
and the communicating server. The configuration of the 
network-device control system in accordance with the 
third aspect of the present invention is substantially sim- 
ilar to that of the first and second aspects of the inven- 
tion. 

[0029] In accordance with the third aspect of the 
present invention, quality control can be performed 
dynamically, without using a particular protocol, even if 
there is a change in a terminal used by a user or a 
change in network configuration due to the addition of a 
network device. Further, the terminal employed by the 
user and the server that is the destination of communi- 
cation can communicate at a quality set in advance for 
the user or application. 

[0030] Other features and advantages of the 
present invention will be apparent from the following 
desaiption taken in conjunction with the accompanying 
drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0031] 

Fig. 1 is a block diagram useful in describing an 
overview of the present invention; 
Fig. 2 is a diagram showing an example of the con- 
figuration of a network according to a first embodi- 
ment of the present invention; 
Figs. 3A and 3B are diagrams showing an example 
of information that has been stored in a directory 
server according to the first embodiment; 
Figs. 4A. 4B and 4C are diagrams useful in describ- 
ing the topology of network devices; 
Fig. 5 is a diagram showing an example of router 
information that has been stored in a directory 
server; 

Fig. 6 is a diagram useful in describing priority con- 



trol; 

Rg. 7 is a diagram useful in describing a sequence 
according to a first embodiment of the present 

invention; 

Rg. 8 is a diagram showing an example of the con- 
figuration of a network according to a second 
embodiment of tiie present invention; 
Rgs. 9A. 98 and 9C are diagrams showing an 
example of information that has been stored in a 
directory server according to the second embodi- 
ment; 

Rg. 10 is a diagram useful in describing a 
sequence according to a second example of tiie 
present invention; 

Rg. 11 is a diagram showing an example of the 
configuration of a network according to a third 
embodimerrt of the present invention; 
Rgs. 12A, 12B and 12C are diagrams showing an 
example of information that has been stored in a 
directory server according to the third embodiment; 
Rg. 13 is a diagram useful in describing a 
sequence according to a third example of the 
present invention; 

Rg. 14 is a diagram showing an example of the 
configuration of a network according to a fourth 
embodimerrt of the present invention; 
Rgs. 15A, 15B and 150 are diagrams showing 
example of information that has been stored in a 
directory server according to the third embodiment: 
Rg. 16 is a diagram useful in describing a 
sequence according to a fourth example of the 
present invention; 

Rg. 17 is a diagram showing another example of 
infbmiation that has been stored in a directory 
server; 

Rg. 18 is a diagram useful in describing a band- 
widtii contro) sequence based upon occurrence of a 
log-in event; 

Figs. 19A and 19B are diagrams showing an exam- 
ple of information that has been stored in a direc- 
tory server for when bandwidth control based upon 
a log-in event is performed; and 
Rg. 20 is a diagram useful in describing RSVP con- 
trol. 

PESCPIPTIQN QFTHE PREFEPREP gMBQPI- 
MENTS 

(A) Overview of tiie present invention 
(a) Construction 

[0032] Fig. 1 is a block diagram illustrating an over- 
view of the present invention. 

[0033] In Fig. 1. an event notification device A 
detects and reports tiie fact that a user has logged in 
from a communication terminal C or that a user has 
launched a predetermined application on the communi- 
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cation terminal C. A network-device controller B per- 
forms priority control of a network device N t>ased u[X>n 
information reported from the event notification device 
A. 

[0034] The event notification device A includes an 
event detector A1 for detecting that a user has togged in 
from the communication terminal C or that a user has 
launched an application from a communication termi- 
nal, and an event notrfier A2 for notifying the network- 
device controller B of the fact that an event occurred, the 
identifier of the user or the identifier of the application. 
[0035] The network-device controller B includes an 
event receiver B1 for receiving notification from the 
event notifier A2; a configuration determination unit B2 
for acquiring the priority of a user indicated by a 
received user identifier or the priority of an application 
Indicated by a received application identifier, and deter- 
mining whether it is necessary to configure for priority 
control; a device selector B3 for selecting a network 
device which is subjected to priority control based upon 
the priority acquired; a device-specific information 
acquisition unit B4 for acquiring the configured state of 
a selected network device and a method of configuring 
the device; a configuration information generator B5 for 
generating priority-control configuration information 
necessary for performing priority control of every each 
network device t>ased upon the acquired device-specific 
information and priority; and a configuration information 
transmitter 86 for transmitting the priority-control config- 
uration information, which has been generated by the 
configuration information generator, to the selected net- 
work device N to thereby set this information In the net- 
work device. 

(b) Overview of first embodiment 

[0036] The first embodiment Is such that when a 
user logs in from a communication terminal, the net- 
work-device controller takes the iog-in as an event to 
configure priority-control information for a network 
device on the communication path in accordance with a 
priority that has been set in advance for this user, 
thereby performing control of priority 
[0037] In a network having a device that records in 
memory the fact that a user has logged in from the com- 
munication terminal C, the event detector Al reads the 
recorded content of the memory periodically and com- 
pares this with the previous recorded content to monitor 
a change In the recorded content, i.e., the occurrence of 
log-in. Alternatively, the event detector Al monitors the 
occurrence of log-in by having the above-mentioned 
device notify it of the ^ct that the stored content has 
been updated. 

[0038] Upon detecting iog-in, the event detector Al 

acquires the address of the communication terminal C. 
the identifier of the user who has logged in and the 
event type (log-in in this case), and the event notifier A2 
reports the acquired information to the network-device 



controller B as event information. 
[0039] In the network-device controller B. the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the conf igu- 

5 ration determination unit B2. The latter recognizes the 
fact that an event occurred at the communication termi- 
nal C and determines, k>ased upon the type of event, 
whether configuring of priority control is required. If the 
configuring is required, the configuration determination 

10 unit B2 acquires information (user priority) that has 
been set in advance for the user and decides that traffic 
at such time that the user utilizes the network is to t>e 
controlled in accordance with the acquired priority. Next, 
the configuration determination unit B2 notifies the 

15 device selector 83 of the event Information and of the 
fact that configuring of priority is necessary. The device 
selector B3 selects, among a number of network 
devices (routers, etc.) in the network, network devices 
on a communication path between the communication 

20 terminal C of the user and the server that is the destina- 
tion of communication obtained from information that 
has been set in advance for this user. In other words, 
the network-device controller B selects network devices 
for which control of priority is required. 

25 [0040] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of priority 
contro\ is requkodi onto the received information from 
the previous stage and delivers the resulting information 

30 to the device-specific information acquisition unit B4. 
The latter acquires, for each device indicated by the 
delivered device addresses, a method of configuring 
information for each device, configurable parameters 
and states of the devices, appends this information to 

35 the received information and delivers the resulting infor- 
mation to tiie configuration information generator B5. 
On the basis of the information received, the configura- 
tion information generator B5 determines what kind of 
configuration content is required for what network 

40 device and through what method, generates, by using 
the user priority, configuration content (priority-control 
configuration information) for all devices requiring con- 
figuring, and reports this information to the configuration 
information transmitter B6. On the basis of the priority- 
's control configuration information and configuration 
method obtained from the configuration information 
generator 85, the configuration information transmitter 
B6 transmits the priority-control information to all net- 
work devices N on the communication path that need to 

so be configured, thereby configuring these network 
devices. 

[0041 ] According to the f irst embodiment, the event 
notification device A detects an event and. on the basis 
of the event, the network-device controller B dynami- 
55 cally configures tiie priority-control information for the 
network devices on the communication path. This 
makes possible flexible control of priority that accommo- 
dates a change In the state of a network. In addition, it 
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is possible to perform communication control that con- 
forms to the priority that has been set in advance for a 
user. Further, the protocol between a communication 
tenminal (client), server and network device can be an 
already existing protocol. As a result, a network device 
or terminal need not be equipped with a special protocol 
in order to perform priority control. 

(c) Overview of second embodiment 

[0042] The second embodiment is such that when a 
user launches an application after logging in from a 
communication terminal the network-device controller 
takes the launching of the application as an event to 
configure priority-control information for a network 
device on the communication path in accordance with a 
priority that has been set in advance for this user, 
thereby performing priority control. Therefore, unlike the 
first embodiment in which the configuring of priority- 
control information is performed by taking login as an 
event, the second embodiment configures priority-con- 
trol information by taking launching of an application 
after log-in as the event. 

[0043] The event detector A1 monitors the launch- 
ing of applications in a manner similar to that of the first 
embodiment. Upon detecting launching of an applica- 
tion, the event detector A1 acquires the address of the 
communication terminal C that launched the applica- 
tion, the user identifier and the event type (launching of 
an application in this case), and the event notifier A2 
reports the acquired information to the network-device 
controller B as event information. 
[0044] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. As a result, the latter rec- 
ognizes the fact that an event occurred at the 
communication terminal C and determines, based upon 
the type of event, whether configuring of priority control 
is required. If configuring is required, the configuration 
determination unit B2 acquires priority information that 
has been set In advance for the user and decides that 
traffic at such time that the application utilizes tiie net- 
work is to be controlled in accordance with the priority of 
the user. Next, the configuration determination unit B2 
notifies the device selector B3 of the event information 
and of the fact that configuring of priority is necessary 
Priority-control information is then configured for the 
network devices N on the communication path by con- 
trol similar to that of the first embodiment. 
[0045] According to the second embodiment, prior- 
ity control is performed in accordance with a priority, 
which has been sei in advance for the user, taking 
launching of an application after log-in as the everrt. In 
comparison with the first embodiment, therefore, config- 
uring of priority control in accordance with user priority 
can be performed more reliably solely for network 
devices necessary for communication. 



(d) Overview of third embodiment 

[0046] The third embodiment is such that when a 
user launches an application after logging in from a 

5 communication terminal, the network-device controller 
takes the launching of the application as an event to 
configure priority-control information for a network 
device on the communication path in accordance with a 
priority that has k>een set in advance for this application. 

10 thereby performing priority control. 

[0047] The event detector A1 monitors the launch- 
ing of applications in a manner similar to that of the first 
embodiment. Upon detecting launching of an applica- 
tion, the event detector A1 acquires the address of the 

15 communication terminal C that launched the applica- 
tion, the application identifier arxi the event type 
(launching of an application in this case), and the event 
notifier A2 reports the acquired information to the net- 
work-device conti'oller B as event information. 

20 [0048] In the network-device controller B, the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. As a result, the latter rec- 
ognizes the fact that an event occurred at the 

25 communication terminal C and determines, based upon 
the type of event, whether configuring of priority control 
is required. If configuring is required, the configuration 
determination unit B2 acquires information (priority) that 
has been set in advance for the launched application 

30 and decides tiiat traffic at such time that the application 
utilizes the network is to be controlled in accordance 
with the atjove-mentioned priority. Next, the configura- 
tion determination unit B2 notifies the device selector 
83 of the event information and of the foct that configur- 

35 ing of priority is necessary. The device selector B3 
selects, among a number of network devices in the net- 
work, network devices on a communication path 
between the communication terminal C of the user and 
the server with which the application communicates. In 

40 other words, the network-device controller B selects 
network devices tor which control of priority Is required. 
[0049] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of priority 

45 control is required onto tiie received information from 
the previous stage and delivers the resulting information 
to the device-specific information acquisition unit B4. 
The latter acquires, for each device irKJicated by the 
delivered device addresses, a method of configuring 

so information for each device, configurable parameters 
and states of the devices, appends this information to 
the received information and delivers the resulting infor- 
mation to the configuration information generator B5. 
On tiie basis of the information received, the conf igura- 

55 tion information generator B5 determines what kind of 
configuration content is required for what network 
device and through what method, generates, by using 
the application priority, configuration content (priority- 
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control configuration information) for all devices requir- 
ing configuration, and reports this information to the 
configuration information transmitter B6. On the basis of 
the priority-control configuration information and config- 
uration method obtained from the configuration informa- 
tion generator B5, the configuration information 
transmitter B6 transmits the priority-control information 
to all network devices N thai need to be configured, 
thereby configuring these network devices. 
[0050] Thus, the configuring of priority-control infor- 
mation needed to execute an application can be per- 
formed only for devices requiring priority control, this 
being carried out taking launching of the application by 
the user as the event. Further, communication control 
conforming to a priority that has been set in advance for 
an application can be performed. 

(e) Overview of fourth embodiment 

[0051] The fourth embodiment is such that when a 
user launches an application after logging in from a 
communication terminal, the network-device controller 
takes the launching of the application as an event to 
configure bandwidth, which is required by the applica- 
tion, for a network device on the communication path of 
the application in accordance with a communication- 
quality value (e.g.. bandwidth) that has been set in 
advance for this application, thereby performing band- 
width control of this network device. 
[0052] The event detector A1 monitors the launch- 
ing of applications in a manner similar to that of the first 
embodiment. Upon detecting launching of an applica- 
tion, the event detector A1 acquires the address of the 
communication terminal C that launched the applica- 
tion, the application identifier and the event type 
(launching of an application in this case), and the event 
notifier A2 reports the acquired information to the net- 
work-device controller B as event information. 
[0053] In the network-device controller B. the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. The latter recognizes the 
fact that an event occurred at the communication termi- 
nal C and determines, based upon the type of event, 
whether configuring of bandwidth is required. If config- 
uring is required, the configuration determination unit 
82 acquires the communication-quality value (band- 
width information) of this application and decides that 
communication is to be performed upon reserving the 
bandwidth required by this application at the time of 
communication. Next, the configuration determination 
unit B2 notifies the device selector B3 of the event infor- 
mation and of the fact that configuring of bandwidth is 
necessary. The device selector B3 selects, among a 
number of network devices in the network, network 
devices on a communication path between the commu- 
nication terminal C of the user and the server with which 
this application communicates. In other words, the net- 



work-device controller B selects network devices for 
which configuring of bandwidth is required. 
[0054] After the network devices have been 
selected, the device selector B3 adds address informa- 
5 tion of the devices for which the configuring of band- 
width is required onto the received information from the 
previous stage and delivers the resulting information to 
the device-specific information acquisition unit B4. The 
latter acquires, for each device indicated by the deliv- 
10 ered device addresses, a method of configuring infor- 
mation for each device, configurable parameters and 
states of the devices, appends this information to the 
received information from the previous stage and deliv- 
ers the resulting information to the configuration infor- 
ms mation generator B5. On the basis of the information 
received, the configuration information generator B5 
determines what kind of configuration content is 
required for what network device and through what 
method, generates configuration content (bandwidth- 
20 control information) for all devices for which bandwidth 
required by the application must be reserved, and 
reports this information to the configuration information 
transmitter B6. On the basis of the bandwidth-control 
information and configuration method obtained from the 
25 configuration information generator B5, the configura- 
tion information transmitter B6 transmits the bandwidth- 
control information to all network devices N that need to 
be configured, thereby configuring these network 
devices. 

30 [0055] The foregoing is for a case where bandwidth 
required by an application is configured as a communi- 
cation-quality value. However, discard rate and delay 
time, etc., can also be configured in conformity with the 
application. 

35 [0056] In accordance with the fourth embodiment, 
the configuring of quality control such as bandwidth, 
discard rate and delay needed for an application can be 
performed in a network only for devices requiring config- 
uring, this being carried out taking launching of the 

40 application by the user as the event. 

(f) Overview of fifth embodiment 

[0057] The fifth embodiment is such that when a 
45 user logs in from a communication terminal, the net- 
work-device controller takes log -in as an event to config- 
ure bandwidth required by a user for a network device 
on the communication path in accordance with a com- 
munication-quality value (e.g., bandwidth) that has been 
so set in advance for this user, thereby performing band- 
width control of this network device. 
[0058] The event detector A1 monitors log-in in a 
manner similar to that of the first embodiment. Upon 
detecting log-in. the event detector A1 acquires the 
55 address of the communication terminal C, the identifier 
of the user who logged in and the event type (log-in in 
this case), and the event notifier A2 reports the acquired 
information to the network-device controller B as event 



8 



BNSDOCID: <EP 102101 5A2J_> 



15 



EP1021 015 A2 



16 



information. 

[0059] In the network<levice controller B. the event 
receiver B1 receives the event information from the 
event notification device A and delivers it to the configu- 
ration determination unit B2. The latter recognizes the 
fact that an event occun-ed at the communication termi- 
nal C and determines, based upon the type of event, 
whether configuring of bandwidth is required. If config- 
uring is required, the configuration determination unit 
B2 refers to the communication-quality value (band- 
width information) that has been set in advance for this 
user and decides that communication is to be per- 
formed upon reserving the tsandwidth required at the 
time of communication. Ne)ct, the configuration determi- 
nation unit B2 notifies the device selector 83 of the 
event information and of the fact that configuring of 
bandwidth is necessary. The device selector B3 selects, 
among a number of network devices in the network, net- 
work devices on a communication path between the 
communication terminal C of the user and the commu- 
nication<i6stination server obtained from information 
that has been set in advance for this user. In other 
words, the network-device controller B selects network 
devices for which configuring of bandwidth is required. 
[0060] After the network devices have been 
selected, the device selector B3 adds address informa- 
tion of the devices for which the configuring of band- 
width is required onto the received information from the 
previous stage and delivers the resulting information to 
the device-specific information acquisition unit B4. The 
latter acquires, for each device indicated by the deliv- 
ered device addresses, a method of configuring infor- 
mation for each device, configurable parameters and 
states of the devices, appends this information to the 
received information from the previous stage and deliv- 
ers the resulting information to the configuration irrfor- 
mation generator B5. On the basis of the information 
received, the configuration information generator B5 
determines what kind of configuration content Is 
required for what network device and through what 
method, generates configuration content (bandwidth- 
control Information) for alt devices for which bandwidth 
required by the user must be reserved, and reports this 
Information to the configuration information transmitter 
B6. On the basis of the bandwidth-control information 
and configuration method obtained from the configura- 
tion information generator B5, the configuration infor- 
mation transmitter B6 transmits the bandwidth-control 
information to all network devices N that need to be con- 
figured, tiiereby configuring these network devices. 
[0061 ] The foregoing is for a case where bandwidth 
required by an user is configured as a communication- 
quality value. However, discard rate and delay time, etc.. 
can also be configured in conformity with the user. 
[0062] In accordance witii tiie f iftii embodiment, the 
configuring of quality control such as bandwidtii. dis- 
card rate and delay needed for a user can be performed 
in a network only for devices requiring configuring, this 



being carried out taking user log-in as the event. 
(B) First embodiment 



[0063] Fig. 2 is a diagram showing an example of 
the configuration of a network according to a first 
embodiment of the present invention. Shown in Fig. 2 

10 are a client 1 1 (end terminal) such as a personal com- 
puter; a server 12 having a function for storing data for 
a prescribed application, such as management applica- 
tion data and personnel application data, and distribut- 
ing the data to clients; networks 13^ to 133; routers 14i, 

15 142 for connecting these networks; switches 
(exchanges) 15i to 164 provided in the networks; a 
directory server 16 having a database for storing user 
information on a per-user (e.g., employee) basis; an 
event notifier 1 7 for detecting a log-In event and report- 

20 ing event Information; and a configuration server 18 
which uses log-in as an event to configure the priority, 
which has been set for the user, for the network devices 
15^. 14^. 153. 142. 154 on a communication path OPT. 
[0064] Fig. 2 illustrates an example of a network 

25 configuration for when the client 1 1 accesses the server 
12. This assumes a situation where the client 11 
accesses the server 12 via a network composed of var- 
ious routers and switches and either receives informa- 
tion that has been stored in tiie server 12 from the 

30 server 12 or transmits information to tiie server 12 to 
store the data in the server 1 2. In order to avoid a delay 
in receiving time or transmitting time and the discarding 
of Information owing to the effects of other traffic within 
the network at the time of such communication, each 

35 router traversed by desired traffic provides a service 
through which packets are transported at a priority 
higher than that of other traffic. A method of applying the 
present invention in such case will be described below. 



[0065] The network according to the first embodi- 
ment is composed of the client 1 1 , the server 1 2, the 
directory server 16, the event notifier 17 and the config- 
45 uration server 1 8. The directory server 1 6. a Lightweight 
Directory Access Protocol (LDAP) for accessing this 
directory server, and the function through which the cli- 
ent 1 1 gives notification of log-in by LDAP constitute 
prior art 

so 

(b-1) Client 

[0066] The client 1 1 in this embodiment is an end 
terminal such as a personal computer. The client 1 1 is 
55 connected to the network. If a user lo^ in this dient. 
user information (the user identifier) is reported to the 
directory server 16 using LDAP. More specifically, when 
the user logs in by entering a user identifier or pass- 
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word, etc., from the client 1 1 . the latter reports the user 
identtfier and its owm IP address to the directory server 
16by LDAP 

(b'2) Directory server 

[0067] The directory server 16 manages, in the 
form of a database, information relating to users who 
log in from each client. As shown in Fig. 3A, the direc- 
tory server 16 retains, in a form corresponding to each 
user identifier. (1) the IP address of an important sender 
accessed in dedicated fashion by the user, (2) priority 
when the user utilizes the networK and (3) other user- 
specific information. For example, if the network is one 
constructed within an enterprise, the following will be 
stored in the database of the directory server 16 in cor- 
respondence with user identification of each employee 
(i.e., employee number): (1) the IP address of an impor- 
tant server accessed in dedicated fashion by the 
employee for business-related reasons, (2) priority 
when the employee utilizes the network, (3) other spe- 
cific information. Important servers accessed in dedi- 
cated fashion by an employee for fcwjsin ess-related 
reasons correspond in one-to-one fashion to the section 
to which the employee belongs (accounting depart- 
ment, personnel department, planning department, pat- 
ent department, technical department, etc.). Priority for 
utilizing a server is decided in dependence upon organ- 
ization (person in charge, manager, section chief, 
department chief, etc.). Accordingly, the address of the 
important server and the priority are set in advance tak- 
ing the post of the employee and the organization into 
account, and these are registered in the database. 
[0068] The client 1 1 accesses the directory server 
16 using LDAP. More specifically, the client executes 
database processing in regard to the user information 
using LDAP (the processing including responding to 
Inquiries, updating information and creating of informa- 
tion). Then a user logs in by inputting the user identifier 
from the client 1 1 , the latter reports the user identifier 
and the IP address of the client to the directory server 
16. Upon receiving the identifier and IP address, the 
directory server 16 registers the IP address of the client 
in the database in correspondence with the atx>ve-men- 
tioned user identifier, as shown in Fig. 3B. 
[0069] For example, as shown in Fig. 3A, (1) 
192.168.20.30 (= IPs) has been registered beforehand 
in the database of the directory server 16 and (2) 8 has 
been registered as the priority in the database of direc- 
tory server 16 in correspondence with a user identifier 
"fujitsu". If user A logs in by inputting the user identifier 
"fujitsu" from the client 1 1 under these conditions, the IP 
address 192.168.10.20 (IPc) of the client 11 is regis- 
tered in the database anew as the user-specific infor- 
mation of user A, as shown in Fig. SB. 



(b-3) Event notif ier 

[0070] The event notif ier 17 has a function for noti- 
fying the configuration server 18 of any change that has 

5 occurred on the network and of the status of the net- 
work. Though the event notif ier 17 is shown as being 
separate from the directory server 16 in Fig. 2, it is actu- 
ally provided within the directory server 16. The event 
notif ier 1 7 monitors a change in a prescribed item of 

10 each user in the database of the directory server 16 
from a logged-off state (a state in which there is no 
record of a logged-in client) to a logged-in state (a state 
in which there is a record of a logged-in client) and, if a 
change has occun-ed, notifies the configuration server 

15 18 of (1) the user identifier for which the change has 
occun'ed. (2) the IP address of the client who has 
logged in, and (3) the fact that an event has occurred 
due to log-in (i.e., the type of event). 
[0071] The monitoring of a change in prescribed 

20 items in the database can be implemented by having 
the event notif ier 17 read out the database information 
of the directory server 16 periodically and compare the 
information with that read out previously. 

25 (b-4) Configuration server 

[0072] The configuration server 1 8 has the following 
functions (1) to (4): 

30 (1) Upon receiving notification of the user log-in 
event from the event notif ier 17. the configuration 
server 18 uses the user identifier as a key to query 
the directory server 16 as to the IP address of the 
important server utilized by the user and the priority 

35 of the user and obtains responses regarding the IP 
address and user priority 

(2) Next, using IP routing information from the IP 
address of the client 11 and the IP address of the 
server 12, the configuration server 18 specifies the 

40 routers 1 4^ , 1 42 and the switches 1 5i , 1 63. 1 64 that 
relay the sent and received traffic tfiat occurs 
t}etween the client 1 1 and tfie server 12. More spe- 
cifically, the configuration server 18 identifies the 
network devices on the communication path OPT 

45 between the client 1 1 and server 1 2. This Identifica- 
tion processing performed by the relaying routers is 
executed as follows: If the network is one which 
uses OSPF (Open Shortest Path First) as the IP 
routing protocol, the configuration server 18 

so receives an OSPF LSA (Link State Advertisement) 
packet that has been broadcast within the network. 
The LSA packet contains topology information irKli- 
cating the router connection relationship. When the 
LSA packet is received, tiierefore, the router topol- 

55 ogy can be ascertained. On the basis of this topol- 
ogy information, the shortest path is calculated 
from the known IP addresses of the client 11 and 
server 12 using the Dijkstra algorithm and, hence. 
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the IP routing information is obtained. The configu- 
ration server 18 is capable of obtaining the path 
between the client and server through this proce- 
dure. That is, the configuration server 18 is capable 
of identifying the relaying routers. 5 

Figs. 4A to 4C are diagrams useful in describ- 
ing the router topology information, in a case where 
routers A to E are connected as shown in Fig. 40. 
the topology information of router A is a list of IP 
addresses of the adjacent routers, as shown in Fig. 10 
4A, and the topology information 0I router B is a list 
of IP addresses of the adjacent routers, as shown in 
Fig. 4B. In other words. Fig. 4A expresses the fact 
that router A having the IP address 192.168.15.1 
has been connected to the three routers B. C and is 
D. In regard to router B having the IP address 
192.168.10.1 among these three routers, it is indi- 
cated that there are two adjacent routers, namely 
routers A arttii E, as shown in Fig. 4B. Thus, a list of 
other routers to which a certain router is connected 20 
is expressed as one t£d3le and these tables are pre- 
pared in a number equivalent to the number of 
nodes, thereby expressing the topology of the net- 
work 

(3) The configuration server 18 acquires infonma- 2S 
tton relating to each router (the states of the routers 
and configuration items) from the obtained IP 
addresses of the relaying routers. The states and 
configuration items are, e.g.. configurable parame- 
ters, parameters that have already been config- 30 
ured, protocols utilized in configuring arxi the 
methods of configuration. 

These items of information may be applied to 
the configuration server 18 in advance, or each 
router may be inquired about them using a protocol 35 
such as SNMP (Simple Network Management Pro- 
tocol), or they may be registered together with user 
information as one item of network-device informa- 
tion (router information) and obtained by querying 
the directory server 16 using LDAP with the IP 40 
address of the router serving as a key. For example, 
the fact that logging in to a router is performed by 
Telnet, the fact that a determined ID and password 
are necessary, and the fact that it is possible to 
make various settings and obtain information by 45 
execution of commarKis are stipulated by the router 
information. 

Fig. 5 illustrates an example of a case where 
router information has been stored in the directory 
server 16. The attributes of the router A are stored so 
in the form of a sub-tree of a tree structure. The 
attributes are the IP address of the router, the 
queue control scheme (the name "priority" is 
entered here and signifies a priority control 
scheme), the numt)er (two) of queues, the configu- ss 
ration protocol (Telnet in this example) and the 
names (Queue 1 . Queue 2) assigned to the respec- 
tive queues. This illustrates a case in which priori- 



ties 1 , 2 have been entered for the queues. 

Fig. 6 is a diagram useful in descrit)ing a prior- 
ity control scheme for a router. The scheme 
includes the queue 1 of priority 1 (the highest prior- 
ity), the queue 2 of priority 2 (the lowest priority), an 
allocation unit 3 for allocating input packets to the 
queues 1.2, and a readout controller 4 for reading 
packets out of the queue 1 of highest priority in the 
order of arrival, outputting the packets to a line and. 
only when no packets are present In the queue of 
highest priority, for reading packets out of the queue 
2 of lowest priority in the order of arrival and output- 
ting the packets to the line. In order to subject a pre- 
scribed packet to high-priority processing, the iact 
that the packet is to be processed at the high prior- 
ity is set in the allocation unit 3 together with the 
packet identification data. In response, from among 
the arriving packets, the allocation unit 3 inputs the 
packet having the above-mentioned identification 
data to the high-priority queue 1 so that the packet 
is subjected to high-priority processing. 
(4) On the basis of the priority of the user, the con- 
figuration server 18 obtains a priority control 
parameter to configure the network device. For 
example, if the user priority entered from the direc- 
tory server 16 is 8 and a router can be set to only 
two, namely high and low. priorities, the configura- 
tion server 18 determines whether the user priority 
of 8 is the high or low priority and, if it is the high pri- 
ority, configures the router to the high priority. 

[0073] By repeating the above configuring for each 
router, the configuring of the priority of all routers on the 
communication path from the client 1 1 to the server 12 
will eventually be completed and, as a result, it will be 
possible to provide a service for communicating traffic 
between the client and server at a priority higher than 
that of other traffic. 

(c) Priority configuration sequence 

[0074] Fig. 7 Is a diagram useful in describing a pri- 
ority configuration sequence according to the first 
emt)odiment. This illustrates a case in which when the 
user has logged in from the client 11, the configuration 
server 18 uses log-in as an event to perform control of 
priority by configuring the routers 14i, 142 on the co"'" 
munication path with priority control infornnation in 
accordance with a priority set in advance for this user. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 1 1 
having the IP address 192.169.10.20 IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier "fujitsu** and the IP 
address of the client. The directory server 16 regis- 
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ters the IP address of the client in association with 
the user identifier '^fujitsu** in the database (see Fig. 
3B). 

II. The event notifier 17 within the directory server 
16 detects log-in and notifies the configuration 
server 18 of the fact that a user having the user 
identifier "f ujitsu" has logged in to the client 1 1 hav- 
ing the IP address IPc. 

III. The configuration server 18 queries the direc- 
tory server in regard to the priority of the user by 
LDAP using the user identifier "fujitsu" as the key 
and obtains, as a response, the fact that the 
address of the server 12 Is 192.168.20.30 IPs) 
and that the priority is 8. 

IV. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
comnnunication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14^ Is "192.168.15.1 (= IPr)". 

V. The configuration server 18 obtains the state of 
the router 14^ and information (Fig. 5) relating to 
the configuration items. As a result, the router 14i 
can be configured using Telnet and it is ascertained 
that this router possesses two priority settings, 
namely high and low. 

VI. If the priority that has been assigned to the user 
identifier "fujitsu" has a value of 8 (the maximum 
value being 10) among ten priority levels, the con- 
figuration server 18 recognizes that the router 14^ 
is to be configured for high-priority processing. 
Next, the configuration server 18 performs Telnet 
communication for the router 14i of IP address IPr 
and establishes a high priority for communication 
for which the IP address on the originating side is 
IPc and the IP address at the destination is IPs. 

VII. The configuring of priority processing described 
above is performed for other routers as well. 

(d) Modification 

[0075] In the embodiment set forth above, a router 
on the communication path between the client and 
server is found using OSPF. However, the topology and 
IP communication path may be found based upon other 
routing protocol information such as RIP (Routing Infor- 
mation Protocol) and a network management protocol 
such as SNMP may be used. Further, the client 1 1 may 
execute traceroute processing with regard to a destina- 
tion IP address, thereby finding the IP address of a 
router on the communication path so that this informa- 
tion may be acquired by the configuration server 18. 
With this method, the configuration server need not 
compute topology information and path. 
[0076] According to the above-described embodi- 
ment, user information has been stored in the directory 
server. However, the state of log-in can be managed 
also by using another database having a data manage- 
ment function. 



[0077] With the foregoing embodiment. LDAP is uti- 
lized for the delivery of user data. However, any protocol 
can be utilized as long as it is capable of acquiring data. 
[0078] In the foregoing embodiment, the case 

5 assumed is one in which the priority of the user or the IP 
address of an important server is obtained. In a case 
where these are not obtained, however, configuring 
need not be performed or a priority or IP address given 
beforehand may be set instead of these values. 

10 [0079] Further, according to the foregoing embodi- 
ment, only one Important server exists. However, In a 
case where there are a plurality of servers, the above- 
described emtxxjiment can be applied to each one. 
[0080] Further, according to the foregoing embodi- 

15 ment. configuring of priority is attempted for all relaying 
routers. However, the configuring of priority may be per- 
formed for a router decided in advance. The configuring 
of priority may be performed even for switches of a MAC 
(Media Access Control) layer in addition to relaying rout- 

20 ers present on the communication path. 

[0081] Further, according to the foregoing embodi- 
ment, the configuring of priority is carried out when an 
event occurs. However, the configuration server may 
periodically check for a change in path Information or 

25 user Information and. when such a change is detected, 
nnay cancel the original settings and then perform a 
reconfiguring operation, thereby making possible con- 
trol of priority for dealing with a change in network con- 
figuration or user information after settings have been 

30 made. Alternatively, the event detector may detect a 
change in user information and network configuration 
and notify the configuration server, in response to which 
the configuration server may cancel the original setting 
and then perform a reconfiguring operation. Further, the 

35 monitoring of a change in a prescribed item in the data- 
base can be implemented by adding on an event detec- 
tor as part of the function for writing data from the 
directory server 16 to the database. 
[0082] The modification set forth above can fc>e 

40 applied to enrdxx:timents described below as well. 

(0) Second embodiment 
(a) Construction 

45 

[0083] Fig. 8 is a diagram illustrating an example of 
the construction of a second embodiment of the present 
invention. Components identical with those of the first 
embodiment shown in Fig. 2 are designated by like ref- 

50 erence characters. 

[0084] According to the second embodiment, the 
event notifier 1 7 performs monitoring to determine that 
the user has launched an application at an end terminal 
and the configuration server 18 performs configuration 

55 for control of priority t>ased upon detection of launching 
of the application (detection of an event). More specifi- 
cally, the second embodiment differs from the first 
embodiment in terms of the monitoring function of the 
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event notif ier 17. Performing control of priority at launch- 
ing of an application following log-in. as is done in the 
second embodiment, is better than performing control of 
priority at the time of log-in, as is done in the first 
embodiment, for the purpose of configuring the priority 
of a router in strict conformity with the case in which traf- 
fic is actually utilized. 

[0085] As in the first embodiment, the network of 
this embodiment includes the client 11. the server 12. 
the directory server 16, the event notif ier 17 arxJ the 
configuration server 18. 

(b) Functions of components 

(b-1) Client 

[0066] The client 1 1 is an end terminal such as a 
personal computer and is connected to the network, if a 
user logs in utilizing the client 11. user information (the 
user identifier) is reported to the directory server 16 
using LDAR More specifically, when the user logs in by 
entering a user identifier or password, etc.. from the cli- 
ent 1 1 . the latter reports the user identifier and its own 
IP address to the directory server 16 by LDAR Similarly 
if a certain user launches a prescribed application using 
the client 1 1 , the latter registers the application informa- 
tion (the application identifier and the IP address of the 
server with which this application communicates) in the 
directory server 16 using LDAR 

(l5-2) Directory server 

[0087] The directory server 16 manages, in the 
form of a database, information relating to users and 
information relating to applications launched by users. 
More specifically, the directory server 16 retains, in the 
form of a database. (1) a user identifier, (2) the IP 
address of an end terminal at which the user has logged 
in. (3) the identifier of an application utilized by the user, 
(4) the IP address of the server with which this applica- 
tion communicates, and (5) the priority for when the 
user utilizes the network (see Fig. 9C). The client 11. 
which is an end terminal, accesses the directory server 
16 using LDAP arxl subjects the user information to 
database processing (processing such as responding to 
inquiries, updating information and creating informa- 
tion). When a user has logged in or launched an appli- 
cation, the client 11 notifies tiie directory server 16 of 
the information relating to the user or of the information 
relating to the application. 

[0088] As shown in Fig. 9A, (1 ) the priority for when 
the user utilizes the network and (2) other user-specific 
information have initially been registered in the data- 
t>ase of directory server 16 in correspondence with a 
user identifier. If the user logs in by inputting the user 
identifier from the client 1 1 under these conditions, the 
client 1 1 notifies the directory server 1 6 of the user iden- 
tifier and IP address of the client by LDAP. Upon receiv- 



ing the identifier and IP address, the directory server 16 
registers the IP address of the client in the database in 
correspondence with the above-mentioned user identi- 
fier, as shown in Fig. 9B. For example, as shown in Fig. 

5 9A. 8 has been registered as the priority in the database 
of directory server 16 in correspondence with the user 
identifier lujitsu". If user A logs in by Inputting the user 
identifier "fujitsu" from the client 1 1 under these condi- 
tions, the IP address 192. 168. 10.20 (= IPc) of the client 

JO 1 1 is registered in the datat^ase anew as the user-spe- 
dfic information of user A, as shown in Fig. 9B. 
[0089] Similarly if tiie user launches an application 
that utilizes an accounts database, tiie client 1 1 notifies 
the directory server 16 of the identifier "accounting" of 

15 the above-mentioned application and of the IP address 
"192.168.30.11 (= IPa)" of tiie accounts sen/er 12. 
which is the destination with which this application com- 
municates, by LDAP. Upon being so notified, the direc- 
tory server 16 registers the application identifier 

20 "accounting" and the IP address 192.168.30.11 («= IPa) 
in the database, as shown in Fig. 9C. 

(b-3) Event notif ier 

25 [0090] The event notif ier 1 7 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notif ier 17 is shown as being 
separate from the directory server 16. it is actually pro- 

30 vided within tiie directory server 16. The event notif ier 
1 7 monitors, on a per-user t)asis, a change in state from 
an application-inactive state (a state in which an appli- 
cation identifier has not been registered in the directory 
server) to an application-launched state (a state in 

35 which an application identifier has been registered in 
the directory server) and. if a change has occurred, noti- 
fies the configuration server 18 of (1) the IP address IPc 
of the end terminal that launched the application, (2) the 
identifier of the launched application. (3) tiie IP address 

40 IPa of the destination with which the application commu- 
nicates, and (4) the fact that an application-launch event 
has occuned (i.e., the type of event). 
[0091] The monitoring of a change in application 
information in the database can be implemented by 

45 having the event notif ier 1 7 read out the database infor- 
mation of the directory s^ver 16 periodically and com- 
pare the information witii that read out previously. 

(b-4) Configuration server 

50 

[0092] The configuration server 1 8 has the following 
functions (1)to(4): 

(1) Upon receiving notification of the application- 
55 launch event from the event notif ier 1 7, the configu- 
ration sender 18 uses the IP address of tiie end ter- 
minal that launched this application as a key to 
query the directory serv^ 1 6 as to the priority of the 
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user who is utilizing the end terminal and obtains a 
response regarding this inquiry. In this embodi- 
ment, a response to the effect that the priority is 8 is 
obtained when the directory server 16 is queried 
using the \P address \Pc as the key. 5 

It should be noted that an arrangement can be 
adopted in which the configuration server 18 has 
the event notifier 17 report the user identifier in 
addition to the application information, uses this 
user identifier to query the directory server 1 6 with 10 
regard to the priority of the user who is utilizing the 
end terminal and acquires this priority. 

(2) Next, through a method similar to that of the first 
emtxxjiment, the configuration server 18 uses the 
reported IP addresses of the client 1 1 and server 75 
12 and the IP routing information to specify the rout- 
ers 14-1, 142 the switches 15i. 163. 154 that 
relay the sent and received traffic that occurs 
between the client 11 and the server 12. More spe- 
cifically, the configuration server 18 identifies the 20 
network devices on the communication path CRT 
between the client 1 1 and server 12, 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 25 
addresses of the relaying routers 14^ 142- 

(4) On the basis of the router information arxJ prior- 
ity of the user, the configuration server 18 gener- 
ates a priority control parameter to configure the 
router and sets this parameter in the router. For 30 
example, if the user priority entered from the direc- 
tory server 16 is 8 and a router can be set to only 
two, namely high and low, priorities, the configura- 
tion server 18 determines whether the user priority 

of 8 is the high or low priority and. if it is the high pri- 35 
ority, sets the router to the high priority. 

[0093] By repeating the above configuring for each 
router, the configuring of the priority of all routers on the 
communication path from the client 1 1 to the server 12 4o 
will eventually be completed and. as a result, it will be 
possible to provide a service for communicating traffic 
between the client and server at a priority higher than 
that of other traffic. 

45 

(c) Priority configuration sequence 

[0094] Fig. 10 is a diagram useful in describing a 
priority configuration sequence according to the first 
embodiment. This illustrates a case in which when the so 
user has logged in from the client 1 1 and then launched 
an application, the configuration server 1 8 uses launch- 
ing of the application as an event to perform priority con- 
trol by configuring the routers 14i, 142 on the 
communication path with priority control information in ss 
accordance with a priority set In advance for this user. 

1. When the user having the user identifier "fujitsu" 



logs in to the communication terminal (client) 11 
having the IP address 192.169.10.20 (= IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu*'. Accordingly, the LDAP 
message contains the user identifier "fujitsu" and 
the IP address of the client. The directory server 16 
registers the IP address of the client in association 
with the user Identifier '^fujitsu** in the database (see 
Fig. 9B). 

II. When the user having the user identifier "fujitsu" 
launches a prescrbed application at the client 1 1 
having the IP address IPc, this client sends the 
directory server 16 an LDAP message in order to 
register the application information in the directory 
server 16. The LDAP message contains, as appli- 
cation information, (1) the application identifier 
"accounting" launched by the user having the user 
identifier **fujitsu", and (2) the IP address 
192.168.30.11 (= IPa) of the server with which the 
application communicates. Accordingly, the direc- 
tory server 16 registers the application identifier 
"accounting" and the IP address 192.168,30.11 (« 
IPa) of the server with which this application com- 
municates in the database in association with the 
user identifier "fujitsu" (see Fig. 9C). 

III. If tile event notifier 17 within the directory server 
16 detects launching of the application, tiie event 
notifier 17 notifies the configuration server 18 of the 
fact that an application which has the application 
identifier "accounting" and which communicates 
with a server having the IP address IPa has been 
launched at the client 1 1 having the IP address IPc. 

IV. The configuration server 18 queries the direc- 
tory server 16 in regard to the priority of tiie user by 
LDAP using the IP address {- IPc) of the communi- 
cation terminal as the key and obtains, as a 
response, the fact that the priority is 8. 

V. Next, on the basis of OSPF information, tiie con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14i is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains the state of 
tfie router 14-, and information (Rg. 5) relating to 
the configuration items. As a result, the router 14-, 
can be configured using Telnet and it is ascertained 
that this router possesses two priority settings, 
namely high and low. 

VII. If the priority that has been assigned to the user 
identifier "fujitsu" has a value of 8 (the maximum 
value being 10) among ten priority levels, the con- 
figuration server 18 recognizes that the router 14-, 
is to be configured for high-priority processing. 
Next, the configuration server 18 performs Telnet 
communication for the router 14^ of IP address IPr 
and establishes a high priority for communication 
for which the IP address on the originating side is 
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IPC and the IP address at the destination Is IPs. 
VIII. The configuring of priority processing 
described above is performed for other routers as 
well. 

(D) Third embodiment 

(a) Construction 

[0095] Fig. 11 is a diagram illustrating an example 
of the construction of a third emtx)diment of the present 
invention. Components identical with those of the sec- 
ond embodiment shown In Fig. 8 are designated by like 
reference characters. 

[0096] According to the third embodiment, the event 
notifier 17 performs monitoring to determine that an 
application has been launched at an end terminal and. 
on the basis of detection of application launch (event 
detection), the configuration server 18 configures prior- 
ity for a router on the communication path of the appli- 
cation. In the second embodiment, configuring of 
priority is performed for a router by utilizing a priority 
that is decided for each user. In the third embodiment, 
however, configuring of priority is performed for a router 
by utilizing a priority that is decided for each application. 
In accordance with the third emtxxjiment priority con- 
trol made to conform to the characteristics of the appli- 
cation becomes possible. 

[0097] As in the first and second embodiments, the 
network according to the third embodiment includes the 
clierrt 11. the server 12. the directory server 16. the 
event notifier 17 and the configuration server 18. 

(b) Functions of componerrts 
(b-1) Client 

[0098] The client 1 1 is an end terminal such as a 
personal computer and is connected to the network. If a 
user logs in utilizing the client 11, user information (the 
user identifier) is registered in the directory server 16 
using LDAR More specifically, when the user logs in by 
entering a user identifier or password, etc., from the cli- 
ent 1 1 . the latter registers the user identifier arxl its own 
IP address in the directory server 16 by LDAR Similarly, 
if a certain user launches a prescribed application using 
the client 1 1 . the latter registers the application informa- 
tion (the application identifier and the IP address of the 
server with which the application communicates) in the 
directory server 16 using LDAR 

[0099] It should be noted that if application priority 
and the IP address of the communication<Jestination 
server of the application have been registered in the 
directory server 16 in association with the application 
identifier, the client need only register the application 
identifier in the directory server 16 as the application 
information. 



(b-2) Directory server 

[0100] The directory server 16 manages, in the 
form of a database, information relating to users and 

5 infonmation relating to applications launched by users. 
The user information contains (1) the user identifier, (2) 
the IP address of the end terminal at which the user has 
logged in. (3) the identifier of the application utilized by 
the user. (4) the IP address of the server with which this 

10 application communicates, and (5) other specific infor- 
mation (see Fig. 1 1C). Further, the application informa- 
tion contains (1) tiie application identifier and (2) the 
priority of the application. However, the application infor- 
mation can include the IP address of the server with 

15 which the application communicates. 

[0101] The client 11, which is an end terminal, 
accesses the directory server 16 using LDAP and sub- 
jects the user information to database processing 
(processing such as responding to inquiries, updating 

20 information and creating information). When a user has 
logged in or launched an application, the client 11 noti- 
fies the directory server 16 of the information relating to 
the user or of the information relating to the application. 
[0102] As shown in Fig. 12A. only user-specific 

25 information has initially been registered in the directory 
server 16 in correspondence with a user identifier. An 
application priority of 6 has been registered in corre- 
spondence with the application identifier "accounting". 
[01 03] If tiie user togs in by inputting the user iden- 

30 tif ier from the client 1 1 under these conditions, the client 
11 notifies the directory server 16 of the user identifier 
and IP address of the client by LDAR Upon receiving 
the identifier and IP address, the directory server 16 
registers the IP address 192.168.10.20 (= IPc) of thedi- 

35 ent in correspondence with the above-mentioned user 
identifier, as shown in Fig. 12B. 
[0104] Similarly, if the user launches an application 
that utilizes an accounts database, for example, the cli- 
ent 11 notifies the directory sender 16 of the identifier 

40 "accounting" of the above-mentioned application and of 
the IP address "192.168.30.11 (= IPa)" of the accounts 
server 12. which is the destination with which this appli- 
cation communicates, by LDAP. Upon being so notified, 
the directory server 16 registers the applicatiori identi- 

45 fier and the IP address of the server, which is the desti- 
nation with which the application communicates, in the 
database, as shown in Fig. 12C. 

(b-3) Event notifier 

50 

[0105] The event notifier 17 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notifier 17 is shown as being 
55 separate from the directory server 16. it is actually pro- 
vided within the directory server 16. The event notifier 
17 monitors, on a per-user basis, a change in state from 
an application-inactive state to an application-launched 
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state and. if a change has occurred, notifies the config* 
uration server 18 of (1 ) the IP address IPc of the end ter- 
minal that launched the application, (2) the identifier of 
the launched application. (3) the IP address iPa of the 
destination with which the application communicates, 5 
and (4) the fact that an application-launch event has 
occurred (i.e.. the type of event). 
[0106] The monitoring of a change in application 
information in the datat>ase can be implemented by 
having the event notif ier 1 7 read out the database infor- 10 
mation of the directory server 16 periodically and com- 
pare the Information with that read out previously. 

(b-4) Configuration server 

IS 

[01 07] The oorrf iguration server 1 8 has the following 
functions (1) to (4): 

(1) Upon receiving notification of the application- 
launch event from the event notif ier 17, the conf igu- so 
ration server 18 uses the application identifier con- 
tained in the event notification as a key to query the 
directory server 16 as to the priority, on the net- 
work, of the application that has been launched at 
the end terminal, and obtains a response regarding 25 
this inquiry In this embodiment, a response to the 
effect that the priority is 6 is obtained when the 
directory server 16 is queried using the application 
identifier "accounting" as the key 

(2) Next, through a method similar to that of the first 30 
emtKxJiment, the configuration server 18 uses the 
reported IP addresses of the client 11 and server 

1 2 and the IP routing information to specify the rout- 
ers 14-1, 142 a'^ci the switches 15i, IS3, 164 that 
relay the sent and received traffic that occurs 35 
between the client 1 1 and the server 12. KAore spe- 
cifically, the configuration server 18 identifies the 
network devices (routers and switches) on the com- 
munication path CPT between the client 11 and 
server 12. 40 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 
addresses of the relaying routers. 

(4) On the basis of the router information and prior- 45 
ity of the application, the configuration server 18 
generates a priority control parameter to configure 
the router and, u^ng a setting protocol, sets this 
parameter in the router that relays the communica- 
tion between the client and the server. By repeating so 
the above configuring for each router, the corrfigur- 

ing of the priority of all routers on the communica- 
tion path from the client 11 to the server 12 will 
eventually be completed arKl. as a result, it will be 
possible to provide a service for communicating ss 
traffic between the client and server at a priority 
higher than that of other traffic. 



(c) Priority configuration sequence 

[0108] Fig. 13 is a diagram useful in describing a 
priority configuration sequence according to the third 
embodiment. This illustrates a case in which when the 
user has logged in from the client 1 1 and then launched 
an application, the configuration server 18 uses launch- 
ing of the application as an event to perform priority con- 
trol by configuring priority control information for the 
routers 14^. 142 on the communication path in accord- 
ance with a priority set in advance for this application. 

L When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 11 
having the IP address 192.169.10.20 (= IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier "fujitsu" and the IP 
address of the client. Accordingly, the directory 
server 16 registers the IP address of the client in 
association with the user klentifier "fujitsu" in the 
database (see Fig. 11B). 

II. When the user having the user identifier "fujitsu" 
launches a prescribed application at the client 1 1 
having the IP address IPc, this client sends the 
directory server 16 an LDAP message in order to 
register the application information. The LDAP 
message contains, as application information, the 
application Identifier "accounting" launched by the 
user having the user identifier "fujitsu", and the fP 
address 192.168.30.11 (s IPa) of the server with 
which the application communicates. Accordingly, 
the directory server 16 registers the application 
identifier "accounting" and the IP address 
192.168.30.11 (= iPa) of the server with which this 
application communicates in the database in asso- 
ciation with the user identifier "fujitsu" (see Fig. 
12C). 

III. W the event notifier 17 within the directory server 
16 detects launching of the application, the evem 
notifier 17 notifies the configuration server 18 of the 
fact that an application which has the application 
identifier "accounting" and which communicates 
with a server having the IP address IPa has been 
launched at the client 1 1 having the IP address IPc. 

IV. The configuration server 18 queries the direc- 
tory server 16 in regard to the priority of the applica- 
tion by LDAP using the application identifier 
*'accounting" as the key and obtains, as a response, 
the fact that the priority is 6. 

V. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14^ is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains the state of 
the router 1 4^ and information relating to tiie conf ig- 
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uration items. As a resutt, the router 14^ car) be 
configured using Telnet and the configuration 
server 18 can ascertain that this router possesses 
two priorrty settings, namely high and tow. 
VII. If the priority that has been assigned to the 
appiication has a value of 6 (the maximum value 
being 10) among ten priority levels, the configura- 
tion server 1 8 recognizes that the router iPr is to be 
configured for high-priority processing. Next, the 
configuration server 18 performs Telnet communi- 
cation for the router 14^ of IP address IPr and 
establishes a high priority for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 
Vill. The configuring of priority processing 
desaibed above is performed for other routers as 
well. 

(E) Fourth embodiment 

(a) Construction 

[0109] Fig. 14 is a diagram illustrating an example 
of the construction of a fourth embodiment of the 
present invention. Components identical with those of 
the third emt>odiment shown in Rg. 11 are designated 
by like reference characters. In the third embodiment, 
priority configuration for a router on the communication 
path of an application is performed based upon the pri- 
ority of the application. In the fourth embodiment, how- 
ever, bandwidth is configured for a router on the 
communication path of an application based upon the 
bandwidth required by the application. In accordance 
with the fourth embodiment, it is possible to assure 
communication quality more reliably in comparison with 
priority control. 

[01 1 0] As in the first through third embodiments, the 
network according to the fourth emtxxiiment includes 
the client 1 1, the server 12, the directory server 16. the 
event notifier 17 and the configuration server 18. 

(b) Functions of components 
(b-1) Client 

[0111] The client 11 is an end terminal such as a 
personal computer and is connected to the network. If a 
user logs in utilizing the client 11, user information (the 
user identifier) is registered in the directory server 16 
using LDAR More specifically, when the user logs in by 
entering a user identifier or password, etc.. from the cli- 
ent 1 1 . the latter registers the user identifier and its own 
IP address in the directory server 1 6 by LDAR Similarly, 
if a certain user launches a prescribed application using 
the client 1 1 . the latter registers the application informa- 
tion (the application identifier and the IP address of the 
communication-destination server of the application) in 
the directory server 16 using LDAR Simiiariy. if a certain 



user launches a prescribed application using the client 
11, the latter registers the application information (the 
application identifier and the IP address of the server 
with which the application communicates) in the direc- 
5 tory server 16 using LDAR 

(b-2) Directory server 

[0112] The directory server 16 manages, in the 

10 form of a database. Information relating to users and 
information relating to applications launched by users. 
The user information contains (1) the user identifier, (2) 
the IP address of the end terminal at which the user has 
logged in, (3) the identifier of the application utilized by 

75 the user, (4) the IP address of the server with which this 
application communicates, and (5) other specific infor- 
mation (see Fig. 150). Further, the application informa- 
tion contains (1) the application identifier and (2) the 
bandwidth required by the application. The application 

20 information can include the IP address of the server with 
which the application conmnunicates. 
[0113] The client 11. which is an end terminal, 
accesses the directory server 16 using LDAP and sub- 
jects the user information to database processing 

25 (processing such as responding to inquiries, updating 
information and creation of information). Then a user 
has logged in or launched an application, the client 1 1 
notifies the directory server 16 of the information relat- 
ing to the user or of the information relating to the appli- 

30 cation. 

[0114] As shown in Fig. 15A. only user-specific 
information has Initially been registered in the directory 
server 16 in correspondence with a user identifier. A 
l^andwldth of 1 .5 Mbps required by the application has 

35 been registered in correspondence with the application 
identifier Videoplayer". tf the user logs in by inputting 
the user identifier "f ujitsu" from the client 1 1 under these 
conditions, the client 11 notifies the directory server 16 
of the user identifier and IP address 192.168.10.20 (= 

40 IPC) off the client by LDAP. Upon receiving the user iden- 
tifier and IP address, the directory server 16 registers 
the IP address IPc of the client in correspondence with 
the at>ove-mentioned user identifier, as shown in Rg. 
15B. 

45 [0115] Similarly, if the user launches an application 
for reproducing video, the client 1 1 notifies the directory 
server 16 of the identifier "videoplayer" of the above- 
mentioned application and of the IP address 
"192.168.30.1 1 (= IPa)" of the video server 12, which is 

50 the destination with which this application communi- 
cates, by LDAR Upon being so notified, the directory 
server 16 registers the application identifier "video- 
player" and the IP ^dress (= IPa) of the video server, 
which is the destination with which the application com- 

55 municates. in the user information field of the database, 
as shown in Fig. 15C. 
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(b-3) Event notif ler 

[0116] The event notif ier 17 has a function for noti- 
fying the configuration server 18 of any change that has 
occurred on the network and of the status of the net- 
work. Though the event notif ier 17 is shown as being 
separate from the directory server 16, it is actually pro- 
vided within the directory server 16. The event notif ier 
1 7 monitors, on a per-user basis, a change in state from 
an application-inactive state to an application-launched 
state and, if a change has occurred, notifies the config- 
uration server 1 8 of ( 1 ) the IP address IPc of the end ter- 
minal that launched the application, (2) the identifier of 
the launched application, (3) the IP address IPa of the 
destination with which the application communicates, 
and (4) an event notifier "application", which indicates 
the fact that an application-launch event has occurred. 
[0117] The monitoring of a change in application 
information in the database can be implemented by 
having the event notifier 17 read out the database infor- 
mation of the directory server 16 periodically and com- 
pare the Information with that read out previously. 

(b-4) Configuration server 

[01 1 8] The configuration server 1 8 has the following 
functions (1) to (4): 

(1) Upon receiving notification of the application- 
launch event from the event notifier 17, the configu- 
ration server 18 decides, based upon the event 
Identifier "appHcatlon" contained In event notifica- 
tion, whether to perform control for bandwidth res- 
ervation. If bandwidth control is to be performed, 
the configuration server 18 uses the application 
identifier contained in the event notification as a key 
to query the directory server 1 6 as to the bandwidth 
required by the application that has been launched 
at the end terminal, and obtains the response "1.5 
Mbps" regarding this inquiry In this embodiment, a 
response to the effect that the tjandwidth is 1.5 
Mbps is obtained when the directory server 16 is 
queried using the application identifier "video- 
player" as the key 

(2) Next, through a method similar to that of the first 
embodiment, the configuration server 18 uses the 
reported IP addresses of the client 1 1 and server 
1 2 and the IP routing information to specify the rout- 
ers 14i. 142 and the switches IS^. 163. 164 that 
relay the sent and received traffic that occurs 
between the client 11 and the server 12. More spe- 
cifically, the configuration server 18 identifies the 
network devices (routers arxl switches) on the com- 
munication path CPT between the client 11 and 
server 12. 

(3) The configuration server 18 acquires informa- 
tion relating to each router (the states of the routers 
and the configuration items) from the obtained IP 



addresses of the relaying routers. 
(4) On the k)asis of the router information and the 
k>andwidth required by the application, the configu- 
ration server 18 generates a bandwidth control 

5 parameter to configure the router and sets this 
parameter In the router that relays the communica- 
tion between the client and the server. By repeating 
the above configuring for each router, the configur- 
ing of the bandwidth of all routers on the communi- 

10 cation path from the client 11 to the server 12 will 
eventually be completed. As a result, the bandwidth 
required by the application can be assured between 
the client and the server and communication can be 
performed at a high quality. 

15 

(c) Bandwidth configuration sequence 

[0119] Fig. 16 is a diagram useful in describing a 
bandwidth configuration sequence according to the 

20 fourth embodiment. This illustrates a case in which 
when the user has logged in from the client 1 1 and then 
launched an application, the configuration server 18 
uses launching of the application as an event to perform 
bandwidth configuration control of the routers 14i, 142 

25 on the communication path in accordance with the 
required bandwidth set in advance for this application. 

I. When the user having the user Identifier "fujitsu" 
logs in to the communication terminal (client) 1 1 

30 having the IP address 192.169.10.20 (= IPc). the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
the user identifier "fujitsu". The LDAP message 
contains the user identifier "fujitsu" and the IP 

35 address of the client. Accordingly, the directory 
server 16 registers the IP address of the client in 
association with the user identifier "fujitsu" in the 
database (see Fig. 15B). 

II. When the user having the user identifier "fujitsu" 
40 launches a prescribed application at the client 11 

having the IP address IPc, this client sends the 
directory server 16 an LDAP message in order to 
register the application Information. The LDAP 
message contains, as application information, the 

45 application identifier Videoplayer" for video repro- 
duction launched by the user having the user iden- 
tifier "fujitsu". and the IP address 192.168.30.11 (= 
IPa) of the video server with which the application 
communicates. Accordingly, the directory server 16 

50 registers the application identifier "videoplayer" and 
the IP address 192.168.30.1 1 (= IPa) of the server 
with which this application communicates in the 
datal>ase in association with the user identifier 
•"fujitsu" (see Fig. 15C). 

55 III. If the event notifier 1 7 within the directory server 
16 detects launching of the application, the event 
notifier 1 7 notif ies the configuration server 18 of the 
fact that an application which has the application 
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identifier "videoplayer** and vyrhich communicates 
with a video server having the IP address IPa has 
been launched at the client 11 having the IP 
address IPc. 

IV. The configuration server 18 queries, by LDAP. 
the directory server 16 in regard to tiie bandwidth 
required by the application using the application 
identifier "videopiayer"* as the key and obtains, as a 
response, the fact that the required bandwidth is 
1.5 Mbps- 

V. Next, on the basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14^ is "192.168.15.1 (= IPr)". 

VI. The configuration server 18 obtains router infor- 
mation (state and information relating to the config- 
uration items) concerning the router 14^. As a 
result, the router 14i can be configured using Telnet 
and the configuration server 18 can ascertain that 
this router is capable of having its bandwidth config- 
ured. 

Vil. The configuration server 18 performs Telnet 
communication with respect to the router 14i of IP 
address IPr and performs configuring to allocate 
the bandwidth of 1.5 Mbps for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 
VIII. The above-described allocating of bandwidth 
is performed for other routers as well. 

(d) Modification 

[0120] The fourth embodiment relates to a case 
where the tandwidth required by an application is regis- 
tered beforehand in the application information field of 
the directory server 16, as shown in Fig. 15A, the band- 
width required by the application is obtained from this 
registered data and is reported to the configuration 
server. However. It is not necessary to register the 
required bandwidth in advance. For example, an 
arrangement may be adopted in which when an applica- 
tion is launched, the required bandwidth is registered in 
the user Information field upon being sent to the direc- 
tory server 16 along with the application identifier and IP 
address of the destination with which the application 
communicates. Fig. 17 illustrates an example of the 
database structure in directory server 16 in such case. 
With this data sti-ucture. the configuration server 18 is 
capafc>le of querying the directory server 16 in regard to 
required bandwidth using a combination of both the 
user identifier and application identifier as a key. 
[0121] Further, though the foregoing relates to a 
case in which bandwidtii is controlled, control of packet 
discard rate and conta-ol of delay can be executed in the 
same manner. Further, an arrangement can be adopted 
in which two or more types of control such as control of 
bandwidth, control of discard rate and control of data, 



inclusive of control of priority, can be performed simulta- 
neously. 

[0122] Further, the foregoing relates to a case in 
which bandwidth required by an application is set in 

5 advance and the bandwidth of a router is controlled, in 
response to launching of the application, t>ased upon 
the bandwidtii required by this application. However, an 
arrangement can be adopted in which required band- 
widtii is set for every user in advance and bandwidth is 

10 controlled, in response to launching of an application, 
based upon the bandwidth required by the user. 
[0123] Further, the foregoing relates to a case 
where bandwidtii, discard rate and delay are controlled 
by launching an application. However, an arrangement 

15 can be adopted in which bandwidth, discard rate and 
delay are controlled by generating a log-in event. 
[0124] Fig. 18 is a diagram useful in describing a 
sequence in a case where allocation of bandwidth to a 
router on a communication path is performed based 

20 upon bandwidth required by a user at occurrence of a 
log-in event, and Figs. 19A, 19B are diagrams showing 
the structure of the directory server 16. As shown in Fig. 
1 9A, a bandwidth (1 .5 Mbps) required by a user and the 
IP address of an important server communicated with in 

25 dedicated fashion by the user have been registered in 
association with a user identifier. 

I. When the user having the user identifier "fujitsu" 
logs in to the communication terminal (client) 11 

30 having tiie IP address 192.169.10.20 (= IPc), the 
client 11 sends the directory server 16 an LDAP 
message for updating the information concerning 
tfie user identifier "fujitsu". The LDAP message 
contains the user identifier "fujitsu** and the IP 

35 address of the client. The directory server 16 regis- 
ters tiie IP address of the client in association with 
tiie user identifier "fujitsu** in the datat>ase (see Rg. 
19B). 

II. The event notifier 17 within the directory server 
40 16 detects log-In and notifies the configuration 

server 18 of the fact that a user having the user 
Identifier "fujitsu" has logged in to the client 1 1 hav- 
ing the IP address IPc. 

III. The configuration server 18 queries the direc- 
ts tory server in regard to the required user bandwidth 

by LDAP using the user identifier **fujitsu" as the key 
and obtains, as a response, the fact that the 
address of tiie server 12 is 192.168.20.30 (= IPa) 
and that the required bandwidth is 1 .5 Mbps. 

so IV. Next, on tiie basis of OSPF information, the con- 
figuration server 18 finds a router that relays the 
communication between the client 11 and the 
server 12. Assume that the IP address of the one 
router 14^ is **1 92. 168. 15.1 {= IPr)". 

55 V. The configuration server 18 obtains router infor- 
mation (state and information relating to the config- 
uration items) concerning the router 14i. As a 
result, the router 14i can be configured using Telnet 
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and the configuration server 18 can ascertain that 
this router is capable of having its bandwidth config- 
ured. 

VI. The configuration server 18 performs Telnet 
communication with respect to the router 14^ of IP 
address IPr and performs configuring to allocate 
the bandwidth of 1 .5 Mbps for communication for 
which the IP address on the originating side is IPc 
and the IP address at the destination is IPa. 

VII. The above-described allocating of bandwidth is 
performed for other routers as well. 

[01 25] The foregoing is for a case where bandwidth 
is controlled. However, control of packet discard rate 
and control of delay can be performed in similar fashion. 
Further, an arrangement can be adopted in which two or 
more types of control such as control of bandwidth, con- 
trol of discard rate and control of data, inclusive of con- 
trol of priority, can be performed simultaneously. 
[0126] Thus, in accordance with the present inven- 
tion, a network device is found on a communication path 
connecting a communication terminal employed by a 
user and a server that is the destination with which this 
terminal communicates, and priority is controlled by 
configuring priority information, which conforms to the 
priority of the user, for this network device. As a result, 
control of priority can be performed dynamically, without 
using a specific protocol such as RSVP. even if there is 
a change in a terminal employed by a user or a change 
in network configuration due to the addition of a network 
device. 

[0127] Further, in accordance with the present 
invention, communication can be performed between a 
terminal employed by a user and a server, with which 
this terminal communicates, at a priority set for the user 
in advance. As a result, by setting a priority that takes 
the post of an employee and organization, etc., into 
account in an enterprise network, it is possible to per- 
form communication based upon priority control com- 
mensurate with the set priority. 
[0128] Further, in accordance with the present 
Invention, there Is provided a database for storing, in 
association with a user identifier, user information that 
includes the address of a server that is the destination 
of communication and the user priority. An event notifi- 
cation device acquires user priority and the server 
address from the database and reports these to a net- 
work-device controller. As a result, the user, merely by 
entering the user identifier from a prescribed communi- 
cation terminal and logging In, establishes a communi- 
cation path between this communication terminal and 
the server with which the user wishes to communicate. 
Communication between the terminal employed by the 
user and the server can be performed at the priority set 
for the user beforehand. 

[0129] Further, in accordance with the present 
invention, when an application is launched after user 
log-in. the priority control mentioned above is carried 



out. As a result, the configuring of priority control neces- 
sary for the user in a network can be performed at a 
time when priority control is required and with respect to 
a device that requires control of priority. 

5 [0130] Further, in accordance with the present 
invention, a network device is found on a communica- 
tion path connecting a communication terminal 
employed by a user and a server that is the destination 
with which this terminal communicates, and priority is 

10 controlled by configuring priority information, which con- 
forms to the priority of an application that has been 
launched, for this network device. As a result, control of 
priority can be performed dynamically without using a 
specific protocol such as RSVP, even if there Is a 

75 change in a terminal employed by a user or a change in 
network configuration due to the addition of a network 
device. 

[0131] Further, in accordance with the present 
invention, communication can be performed between a 

20 terminal employed by a user and a server, with which 
this terminal communicates, at a priority set for an appli- 
cation in advance. As a result, by configuring priorities 
for various applications in an enterprise network upon 
taking into account the urgency and innportance of 

25 these applications, it is possible to perform communica- 
tion based upon control of priority commensurate with 
the set priority 

[0132] Further, in accordance with the present 
invention, an event notification device acquires the pri- 

30 ority of an application, the address of a server that is the 
destination of communication and the address of the 
communicating terminal from a database based upon 
the application identifier and reports these to a network- 
device controller. As a result, the user, merely by enter- 

35 ing a user identifier from a prescribed communication 
terminal, logging in and launching a prescribed applica- 
tion, estatDiishes a communication path between this 
communication terminal and the server that conforms to 
the application. Communication between the terminal 

40 employed by the user and the server can be performed 
at the priority set for the application beforehand. 
[0133] Further, in accordance with the present 
invention, control of quality (t>andwidth control, discard- 
rate control and delay control) can be performed 

45 dynamically without using a specific protocol even If 
there is a change in a terminal employed by a user or a 
change in network configuration due to the addition of a 
network device. In addition, communication can be per- 
formed between a terminal employed by a user and a 

50 server, which is the destination of communication, at a 
quality set for the user or application in advance. 
[01 34] As many apparently widely different embodi- 
ments of the present invention can be made without 
departing from the spirit arxJ scope thereof, it is to be 

55 understood that the invention is not limited to the spe- 
cific emt)odiments thereof except as defined in the 
appended claims. 
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Claims 



4. The system according to claim 2, wherein 



1 . A network-device control system Ibr performing pri- 
ority control of a network device constituting a net- 
work based upon priority of an user, said system s 
comprising: 

an event notification device for detecting that a 
user has logged in to a communication terminal 
or that a user has launched a predetermined io 
application from a communication terminal, 
and reporting an identifier of the user and the 
tact tiiat an event has occurred; and 
a network-device controller for performing pri- 
ority control of a network device leased upon is 
information reported by said event notification 
device; wherein 

said network-device controller acquires priority 
of the user indicated by the user identifier 
reported by said event notification device, 20 
obtains a network device on a communication 
path between said communication terminal and 
an apparatus that is the destination of commu- 
nication, generates information necessary to 
perform priority control in accordance with the 25 
user priority, and sets this priority control infor- 
mation in each network device 

2. The system according to claim 1. further compris- 
ing a database unit for storing, in association with a 30 
user identifier, user information that includes the 
address of the apparatus that is the destination of 
communication and the user priority; wherein 

said event notification device acquires the pri- 35 
ority of the user and the address of the appara- 
tus that is the destination of communication 
from said database unit and reports these to 
said network-device controller. 

40 

3. The system according to claim 2, wherein 

when a user has logged in by inputting the user 
identifier, the communication terminal serKis 
this user kJentifier and the address of the com- 45 
munication terminal to said database unit; 
said database unit stores the address of the 
communication terminal in association with the 
user identifier; and 

said event notification device detects log-in by so 
a change in user information in said database 
unit, acquires the priority of the user, the 
address of the apparatus that is the destination 
of communication and the address of the com- 
munication terminal from said database unit, ss 
and reports these to said network-device con- 
troller. 



when a user has launched a predetermined 
application, the communication terminal sends 
the user identifier, the address of the communi- 
cation terminal and an application identifier of 
the application to said datat^se unit; 
said datak>ase unit stores the address of the 
communication terminal, the application identi- 
fier and the address of an apparatus that is the 
destination of communication of the application 
in association with the user identifier; and 
said event notification device detects an appli- 
cation-launch event by a change in application 
information in said datat^se unit, acquires the 
priority of the user, the address of the appara- 
tus that is the destination of communication 
and the address of the communication terminal 
from said database unit, and reports these to 
said network-device controller. 

The system according to claim 1. wherein said 
event notification device includes: 

an event detector for detecting that a user has 
logged in to a communication terminal or that a 
user has launched an application from a com- 
munication terminal; and 
an event notifier for notifying saki network- 
device controller of the fad that the event 
occun'ed and of the user identifier; and 
said network-device controller includes: 
an event receiver for receiving notification from 
said event notifier; 

a priority acquisition unit for acquiring the prior- 
ity of the user indicated by the received user 
identifier; 

a device selector for selecting a network device 

which is subjected to priority control t>ased 

upon the priority of the user; 

a device-specific information acquisition unit for 

acquiring state of configuration of the selected 

network device and a method of configuring the 

device; 

a configuration information generator for gener- 
ating priority-control configuration information 
for performing priority control of each network 
device based upon the acquired device-spe- 
cific information and user priority; and 
configuration information transmitter for trans- 
mitting the priority-control configuration infor- 
mation, which has been generated by said 
configuration information generator, to the 
selected network device to thereby set this 
information in this network device. 

The system according to claim 2. wherein a direc- 
toi7 server is provided, said directory server being 
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provided with said event notification device and 
said database unit. 

7. A network-device control apparatus for performing 
priority control of a network device constituting a s 
network based upon priority of an user, said appa- 
ratus comprising: 

an event receiver for receiving an identifier of a 
user from an event notifier when the user has io 
togged in to a communication terminal or when 
the user has launched an application; 
means for acquiring priority of the user, which 
is indicated by the reported user identifier, and 
the address of an apparatus that is the destina- is 
tion of communication by said communication 
terminal; 

a device selector for selecting network devices 
on a path along which the communication ter- 
minal and the apparatus that is the destination 20 
of communication communicate; 
a generating unit for generating Information 
necessary to perform priority control in accord- 
ance with the user priority: and 
means for configuring the network device with 2S 
the information that has been generated by 
said generating unit. 



in association with an application identifier; wherein 

said event notification device acquires the pri- 
ority of the application from said database unit 
and reports this application priority to said net- 
work-device controller. 

10. The system according to claim 9. wherein 

when the user has launched a predetermined 
application, the communication terminal sends 
the application identifier and the address of the 
apparatus that is the destination of communi- 
cation to said database unit and said database 
unit stores the application identifier and the 
address of the apparatus, which is the destina- 
tion of communication, in association with the 
user identifier; and 

saki event notification device detects occur- 
rence of an application-launch event by a 
change in the application information in the 
user information in said database unit, acquires 
the priority of the application, the address of 
the apparatus that is the destination of commu- 
nication and the address of the communication 
terminal from said database unit, and reports 
these to said network-device controller. 



8. A network-device control system for performing pri- 
ority control of a network device constituting a net- 30 
work based upon priority of an application, said 
system comprising: 

an event notification devbe for detecting that a 
user has launched a predetermined application 3S 
from a communication terminal, and reporting 
an identifier of the application and the fact that 
an application-launch event has occurred; and 
a network-device controller for performing pri- 
ority control of a network device based upon 40 
information reported by said event notification 
device; wherein 

said network-device controller acquires priority 
of the application indicated by the application 
identifier reported by said event notification 45 
device, obtains network devices on a communi- 
cation path between said communication termi- 
nal and an apparatus that is the destination of 
communication, generates information neces- 
sary to control the network devices in accord- so 
ance with the application priority, and 
configures each network device with this prior- 
ity control information. 

9. The system according to claim 8. further compris- ss 
ing a database unit for storing user information in 
association with a user identifier, and application 
information, which includes the application priority. 



11. The system according to daim 8, wherein said 
event notification device includes: 

an event detector for detecting that a communi- 
cation terminal has given rise to an application- 
launch event; and 

an event notifier for notifying said network- 
device controller of the fact that the event 
occunred arxj of the application iderrtif ier; arKi 
said network-device controller includes: 
an event receiver for receiving notification from 
said event notifier; 

a priority acquisition unit for acquiring the prior- 
ity of the application indicated by the received 
application identifier; 

a device selector for selecting a network device 

which is subjected to priority control based 

upon the priority of the application; 

a device-specific information acquisition unit for 

acquiring state of configuration of the selected 

network device and a method of configuring the 

device; 

a configuration information generator for gener- 
ating priority-control configuration information 
for performing priority control of each network 
device based upon the acquired device-spe- 
cific information and application priority; and 
configuration information transmitter for trans- 
mitting the priority-control configuration infor- 
mation, which has been generated by said 
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configuration information generator, to the 
selected network device to thereby set this 
information in this network device. 

12. The system according to daim 9, wherein a direc- 
tory server is provided, said directory server being 
provided with said event notification device and 
said database unit. 

13. A network-device control apparatus for performing 
priority control of a network device constituting a 
network based upon priority of an application, said 
apparatus comprising: 

an event receiver for receiving an identifier of 
an application from an event notification device 
when a user has launched an application at a 
communication terminal; 
means for acquiring priority of the application, 
which is indicated by the notified application 
identifier, and the address of an apparatus that 
is the destination of communication by said 
communication terminal based upon the appli- 
cation; 

a device selector for selecting network devices 
on a path along which the comrrunication ter- 
minal and the apparatus that is the destination 
of communication communicate; 
a generating unit for generating information 
necessary to perform priority control in accord- 
ance with the application priority; and 
means for configuring the network device with 
the information that has been generated by 
said generating unit. 

14. A network-device control system for controlling any 
one of bandwidth, discard rate and delay of a net- 
work device constituting a networK said system 
comprising: 

an event notification device for detecting that a 
user has logged in to a communication terminal 
or that a user has launched a predetermined 
application from a communication terminal, 
and reporting an identifier of the user and the 
fact that an event has occurred; and 
a network-device controller for controlling any 
one of bandwidth, discard rate and delay of a 
network device based upon information 
reported by said event notification device; 
said network-device controller: 
acquiring any one of a bandwidth value, dis- 
card-rate value and delay value conforming to 
a user identified by the user identifier reported 
by said event notification device: 
obtaining network devices on a communication 
path between said communication terminal and 
an apparatus that is the destination of commu- 



nication; 

generating configuration information necessary 
to control any one of bandwidth, discard rate 
and delay in accordance with the value 
5 acquired; and 

configuring each network device with this gen- 
erated configuration information. 

15. A network-device control apparatus for controlling 
10 any one of bandwidth, discard rate and delay of a 
network device constituting a networK said appara- 
tus comprising: 

an event receiver for receiving at least an iden- 
15 tif ier of a user from an event notification device 

when the user has togged in to a communica- 
tion terminal or when the user has a launched 
an application; 

means for acquiring any one of a bandwidtii 

20 value, discard-rate value and delay value con- 

forming to a user identified by the notified user 
identifier, and the address of an apparatus that 
is the destination of communication by said 
communication terminal; 

25 a device selector for selecting a network device 

on a patii along which the communication ter- 
minal and tile apparatus that is the destination 
of communication communicate; 
a generating unit for generating configuration 

30 information necessary to control any one of 

bandwidth, discard rate and delay in accord- 
ance with said value acquired; and 
means for configuring the network device with 
the configuration information that has been 

35 generated by said generating unit. 

16- A network-device control system for controlling any 
one of bandwidtii, discard rate and delay of a net- 
work device constituting a network, said system 
40 comprising: 

an event notification device for detecting that a 
user has launched a predetermined application 
at a communication terminal, and reporting an 

45 identifier of the application and the fact that an 

application-launch event has occurred; and 
a network-device controller for controlling any 
one of bandwidth, discard rate and delay of a 
network device based upon information 

so reported by said event notification device; 

said network-device controller: 
acquiring any one of a bandwidth value, dis- 
card-rate value and delay value of an applica- 
tion identified by the application identifier 

55 reported by said event notification device; 

obtaining network devices on a communication 
path between said communication terminal and 
an apparatus that is the destination of commu- 
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nication; 

generating configuration information necessary 
to control any one of bandwidth, discard rate 
and delay in accordance with tlie value 
acquired; and 5 
configuring each network device with this gen- 
erated configuration information. 

17. A network-device control apparatus for controlling 
any one of bandwidth, discard rate and delay of a io 
network device constituting a network, said appara- 
tus comprising: 

an event receiver for receiving an identifier of 
an application from an event identification is 
device when a user has a launched an applica- 
tion at a communication terminal; 
means for acquiring any one of a bandwidth 
value, discard-rate value and delay value con- 
forming to an application identified by the 20 
reported application identifier, and the address 
of an apparatus that is the destination of com- 
munication by said communk^ation terminal 
based upon the application: 
a device selector for selecting a network device 25 
on a path along which the comnnunication ter- 
minal and the apparatus that is the destination 
of communication communicate; 
a generating unit for generating configuration 
information necessary to control any one of 30 
bandwidth, discard rate and delay in accord- 
ance with the value acquired; and 
means for configuring the network device with 
the configuration information that has been 
generated by said generating unit. 35 
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